Senior Platform Security Engineer – APIs & Integrations

Leadout Capital; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Salesforce's Platform Security Team seeks a Senior Product Security Engineer to secure the integration and service-connectivity layer, including events, messaging, connectors, APIs, and cross-boundary data flows. You’ll surface risks in ambiguous designs and drive mitigations while guiding threat modeling, design reviews, and secure-by-default guidance.

This senior role requires hands-on experience securing backend and API systems, deep knowledge of OAuth/OIDC/JWT, and the ability to review Java

Qualifications

• Hands-on security engineer with backend/app security experience.
• Experience reviewing authentication, authorization, and data flow.
• Ability to threat-model complex architectures and trace issues to root cause.
• Familiar with secure-by-default patterns and threat modeling in large codebases.

Responsibilities

• Own security assurance for backend and integration paths across platforms.
• Lead threat modeling and security design reviews.
• Review Java and JavaScript/TypeScript code for security defects.
• Partner with architects and engineers to push secure patterns.

Skills

Threat modeling

Security design reviews

API security

Secure code review

Tools

Java

JavaScript/TypeScript

OAuth 2.0

OIDC

JWT

Job description

Salesforce's Platform Security Team seeks a Senior Product Security Engineer to secure the integration and service-connectivity layer, including events, messaging, connectors, APIs, and cross-boundary data flows. You’ll surface risks in ambiguous designs and drive mitigations while guiding threat modeling, design reviews, and secure-by-default guidance.

This senior role requires hands-on experience securing backend and API systems, deep knowledge of OAuth/OIDC/JWT, and the ability to review Java